| Package | Affected versions | Patched versions |
|---|---|---|
| dss express | = 7.002.1760000.2= 8.0.2= 8.0.4= 8.1= 8.1.1 | |
| dss professional | = 7.002.1760000.2= 8.0.2= 8.0.4= 8.1= 8.1.1 |
Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key. An attacker can obtain the AES crypto key by sending a specific crafted packet to the vulnerable interface.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free